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IN THE CLAIMS 




1 . (currently amended) A method of detecting unauthorized actions vrith respect to 
content on an optical disk, the optical disk including a read-only portion for pre-recorded 
content and a writeable portion for written content, the method comprising: 

reading an identifier on the optical disk; 

determining whether the identifier was located in the read-only or the writeable 
portion of the m e dia optical disk; 

determining whether the identifier identifies itself as a pre-recorded identifier or 
as a written identifier; 

and if the identifier identifies itself as a pre-recorded identifier and is located in 
the writeable portion of the media optical disk, detecting an unauthorized action solely 
from the pre-recorded identifier being located in the writeable portion . 

2, (previously presented) The method of claim 1 wherein the reading of the identifier 
on the optical disk is during a optical disk access operation including one or more of 
record, play, get play key, copy, open, close and create. 

3. (previously presented) The method of claim 2 wherein fimctionality for the optical 
disk access operation is revoked after detecting the unauthorized action. 
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6. (Cancelled) 



7. (Cancelled) 



8. (Cancelled) 



9. (prtvioxisiy presented) The method of claim 1 wherein the identifier is a seed for a 
key generator, the key generator retrieving one or more keys from a key box, the keys for 
one or inoie of imlocking and decrypting files on the optical disk. 
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1 5 . (currently amended) An apparatus for detecting unauthorized actions with respect 
to encrypted data on a media disk, the media disk including a read-only portion for pre- 
recorded content and a writeable portion for written content, the apparatus comprising: 
means for reading an identifier on the media disk; 

means for detennining whether the identifier was located in the read-only portion 
or in the writeable portion of the disk; 

means for determining whether the identifier identifies itself as a pre-recorded 
identifier or as a written identifier; 

and means for detecting an unauthorized action if the identifier identifies itself as 
a pre-recorded identifier and is located in the writeable portion of the media disk , the 
unauthorized action being detected solely fix)m the pre-recorded identifier being located 
in the writeable portion of the media disk . 



16. (Cancelled) 



17. (Original) The apparatus of claim 1 5 wherein the means for reading of the 
identifier includes a media disk access component 



1 8 . (Original) Tht apparatus of claim 1 5 wherein the means for reading the identifier 
operates during an access operation. 
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20. (Cancelled) 

21 . (previously presented) The apparatus of claim 1 5 wherein the identifier is a seed 
for a cryptographic key box, the key box using the identifier to retrieve one or more keys 
for unlocking files on the media disk, 

22. (currently amended) An engine configured to detect unauthorized actions with 
respect to encrypted data on a media disk, the media disk including a read-only portion 
for pre-recorded content and a writeable portion for written content, the engine 
comprising; 

a firmware component located on an application specific integrated circuit 
(ASIC), the firmware component including: 

a block configured to read an identifier on the media disk; 

a block configured to deteraiine whether the identifier was located in the read- 
only portion or the writeable portion of the media disk; 

a block configured to determine whether the identifier identified itself as a pre- 
recorded identifier or ^ a written identifier; and 

a block configured to detect an unauthorized action if the identifier was located in 
the writeable portion and identified itself as a pre-recorded identifie r, the unauthorized 
action being detected solely from the pre-recorded identifier being located in the 
writeable portion of the media disk . 
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